free5gc Vulnerability Advisory Catalog

Total 82 security vulnerabilities recorded for free5gc software and firmware.

← Back to All Vendors
Component: go-upf

free5GC is an open-source project for 5th generation (5G) mobile core networks. free5GC go-upf versions up to and including 1.2.6, corresponding to fr...

📅 2026-02-23
CVSS 7.5 Dossier →
Component: udr

free5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. Versions prior to 1...

📅 2026-02-23
CVSS 5.3 Dossier →
CVE-2026-2525 MEDIUM
Component: free5gc

A vulnerability has been found in Free5GC up to 4.1.0. This affects an unknown function of the component PFCP UDP Endpoint. Such manipulation leads to...

📅 2026-02-16
CVSS 5.3 Dossier →
Component: free5gc

An improper input validation and protocol compliance vulnerability in free5GC v4.0.1 allows remote attackers to cause a denial of service. The UPF inc...

📅 2026-02-13
CVSS 7.5 Dossier →
Component: free5gc

A heap buffer overflow vulnerability in the UPF component of free5GC v4.0.1 allows remote attackers to cause a denial of service via a crafted PFCP Se...

📅 2026-02-13
CVSS 7.5 Dossier →
Component: free5gc

An array index out of bounds vulnerability in the AMF component of free5GC v4.0.1 allows remote attackers to cause a denial of service via a crafted 5...

📅 2026-02-13
CVSS 7.5 Dossier →
CVE-2026-1976 MEDIUM
Component: free5gc

A weakness has been identified in Free5GC up to 4.1.0. Affected is the function SessionDeletionResponse of the component SMF. This manipulation causes...

📅 2026-02-06
CVSS 5.3 Dossier →
CVE-2026-1975 MEDIUM
Component: free5gc

A security flaw has been discovered in Free5GC up to 4.1.0. This impacts the function identityTriggerType of the file pfcp_reports.go. The manipulatio...

📅 2026-02-06
CVSS 5.3 Dossier →
CVE-2026-1974 MEDIUM
Component: free5gc

A vulnerability was identified in Free5GC up to 4.1.0. This affects the function ResolveNodeIdToIp of the file internal/sbi/processor/datapath.go of t...

📅 2026-02-06
CVSS 5.3 Dossier →
CVE-2026-1973 MEDIUM
Component: free5gc

A vulnerability was determined in Free5GC up to 4.1.0. The impacted element is the function establishPfcpSession of the component SMF. Executing a man...

📅 2026-02-06
CVSS 5.3 Dossier →
CVE-2026-1739 MEDIUM
Component: pcf

A vulnerability has been found in Free5GC pcf up to 1.4.1. This affects the function HandleCreateSmPolicyRequest of the file internal/sbi/processor/sm...

📅 2026-02-02
CVSS 5.3 Dossier →
CVE-2026-1684 MEDIUM
Component: free5gc

A vulnerability was found in Free5GC SMF up to 4.1.0. Affected by this issue is the function HandleReports of the file /internal/context/pfcp_reports....

📅 2026-01-30
CVSS 5.3 Dossier →
CVE-2026-1683 MEDIUM
Component: free5gc

A vulnerability has been found in Free5GC SMF up to 4.1.0. Affected by this vulnerability is the function HandlePfcpSessionReportRequest of the file i...

📅 2026-01-30
CVSS 5.3 Dossier →
CVE-2026-1682 MEDIUM
Component: free5gc

A flaw has been found in Free5GC SMF up to 4.1.0. Affected is the function HandlePfcpAssociationReleaseRequest of the file internal/pfcp/handler/handl...

📅 2026-01-30
CVSS 5.3 Dossier →
Component: pcf

Null pointer dereference in free5gc pcf 1.4.0 in file internal/sbi/processor/ampolicy.go in function HandleDeletePoliciesPolAssoId....

📅 2026-01-23
CVSS 7.5 Dossier →
CVE-2025-66719 CRITICAL
Component: nrf

An issue was discovered in Free5gc NRF 1.4.0. In the access-token generation logic of free5GC, the AccessTokenScopeCheck() function in file internal/s...

📅 2026-01-23
CVSS 9.1 Dossier →
Component: free5gc

The free5GC UPF suffers from a lack of bounds checking on the SEID when processing PFCP Session Deletion Requests. An unauthenticated remote attacker ...

📅 2025-12-18
CVSS 7.5 Dossier →
Component: free5gc

An issue was discovered in function LocalNode.Sess in free5GC 4.1.0 allowing attackers to cause a denial of service or other unspecified impacts via c...

📅 2025-12-18
CVSS 7.5 Dossier →
Component: free5gc

An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the Nnssf_NSSAIAvai...

📅 2025-11-24
CVSS 7.5 Dossier →
Component: free5gc

An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via the Nudm_SubscriberDataManagement API....

📅 2025-11-24
CVSS 6.5 Dossier →
Component: free5gc

An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the Npcf_BDTPolicyC...

📅 2025-11-24
CVSS 6.5 Dossier →
Component: free5gc

free5gc v4.1.0 and before is vulnerable to Buffer Overflow. When AMF receives an UplinkRANConfigurationTransfer NGAP message from a gNB, the AMF proce...

📅 2025-11-12
CVSS 7.5 Dossier →
Component: free5gc

Free5gc 4.0.1 is vulnerable to Buffer Overflow. The AMF incorrectly validates the 5GS mobile identity, resulting in slice reference overflow....

📅 2025-09-23
CVSS 7.5 Dossier →
Component: free5gc

Buffer Overflow vulnerability in Free5gc v.4.0.0 allows a remote attacker to cause a denial of service via the AMF, NGAP, security.go, handler_generat...

📅 2025-05-29
CVSS 5.4 Dossier →
Page 3 of 4 (82 Total Records)